$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EclbBr2K9LHxO5dU7-DKYHrXAh0.roa File: EclbBr2K9LHxO5dU7-DKYHrXAh0.roa (raw, json) Hash identifier: 4bCpeOOvxH+tgf6vTJznEx/jCpqfGxwqa/2gzn1Xrn0= Subject key identifier: 11:C9:5B:06:BD:8A:F4:B1:F1:3B:97:54:EF:E0:CA:60:7A:D7:02:1D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: FB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EclbBr2K9LHxO5dU7-DKYHrXAh0.roa Signing time: Wed 24 May 2023 16:03:15 +0000 ROA not before: Wed 24 May 2023 16:03:15 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: May 24 16:03:15 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=11C95B06BD8AF4B1F13B9754EFE0CA607AD7021D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:bf:08:4e:03:c1:45:33:a0:23:4e:89:25: 4a:27:f0:79:c6:a9:95:5a:ca:9b:4c:33:fa:66:19: 89:cc:34:35:b6:02:dd:d2:8a:9d:95:f9:5b:8f:23: a7:b3:ac:07:c3:5f:f5:32:33:04:a2:11:45:bc:89: 4f:70:da:2d:1c:47:9b:30:2b:be:9e:b1:88:95:18: 27:bd:15:76:cf:aa:c1:dc:30:97:1a:0b:dc:00:83: d8:85:42:e1:94:3c:76:99:7b:3d:e4:4f:6a:79:0b: ee:7b:b1:16:9a:0f:3c:ac:72:9f:08:d8:f2:f9:28: 79:65:c3:cc:54:ca:7f:31:b0:3f:3e:cb:03:e7:26: af:4f:fa:88:4a:ee:9b:82:b4:95:90:5f:2a:1b:45: 1b:19:a2:f5:cd:16:84:d8:01:62:45:cd:43:05:8d: fb:90:c6:33:51:00:32:6b:8a:62:e1:5e:db:13:73: 80:f3:19:d8:28:23:52:4f:cb:9d:6a:67:66:2f:eb: 24:38:9f:df:e1:fe:74:bd:ac:86:41:bf:72:3d:0b: 31:b2:bc:38:b0:07:61:e7:1e:cd:2b:75:72:d6:ef: b4:80:0e:fb:c7:b2:88:a6:c0:40:c9:20:8b:eb:c7: 06:40:8a:bd:3a:5a:4f:e2:64:51:11:29:e8:24:fd: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C9:5B:06:BD:8A:F4:B1:F1:3B:97:54:EF:E0:CA:60:7A:D7:02:1D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EclbBr2K9LHxO5dU7-DKYHrXAh0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.227.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a4:a6:d6:5b:e4:0c:f9:74:25:04:b4:5f:cd:62:05:52:52: fa:a6:07:bb:eb:50:9d:15:f6:c4:22:0f:83:5d:9a:52:1c:d6: d8:66:7d:2d:a1:c9:60:43:b8:4d:c2:71:43:26:fb:f6:ae:8f: 75:90:26:47:61:ab:51:7e:72:04:b2:a6:07:e6:c3:62:10:c5: 99:2d:f7:92:84:b8:0e:32:a8:2e:b9:f3:b0:4c:20:3b:d2:ec: 7d:f2:01:9e:de:a6:33:8e:e6:61:cf:c6:b1:82:01:a6:8b:c5: 0b:6d:29:08:ee:b8:dd:ce:f8:37:f6:35:a3:fc:7a:f0:0f:c2: 18:38:ff:1e:12:60:6d:6a:5e:76:cf:e4:69:eb:ea:3f:5b:af: 88:07:19:bc:a1:3a:bf:61:66:98:75:5b:f5:a8:70:01:85:b5: 77:eb:97:2b:d8:37:35:66:56:ea:ee:99:fe:c4:59:47:17:ea: db:11:ea:3d:f3:58:27:46:cc:3e:38:d4:24:69:ea:2a:e3:e8: db:6a:42:44:42:a6:06:5a:24:d8:b2:e8:cc:32:f9:72:0c:68: a6:f8:90:e3:70:37:55:6d:fa:7e:db:dd:d9:e3:31:3d:d7:c4: ef:26:bb:90:53:6c:77:6a:ea:0b:ae:5d:59:e1:1e:aa:b6:af: 2d:5b:08:b5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx NjAzMTVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDExQzk1QjA2QkQ4QUY0 QjFGMTNCOTc1NEVGRTBDQTYwN0FENzAyMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/mb8ITgPBRTOgI06JJUon8HnGqZVayptMM/pmGYnMNDW2At3S ip2V+VuPI6ezrAfDX/UyMwSiEUW8iU9w2i0cR5swK76esYiVGCe9FXbPqsHcMJca C9wAg9iFQuGUPHaZez3kT2p5C+57sRaaDzyscp8I2PL5KHllw8xUyn8xsD8+ywPn Jq9P+ohK7puCtJWQXyobRRsZovXNFoTYAWJFzUMFjfuQxjNRADJrimLhXtsTc4Dz GdgoI1JPy51qZ2Yv6yQ4n9/h/nS9rIZBv3I9CzGyvDiwB2HnHs0rdXLW77SADvvH soimwEDJIIvrxwZAir06Wk/iZFERKegk/U6nAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEclbBr2K9LHxO5dU7+DKYHrXAh0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VjbGJCcjJLOUxIeE81ZFU3LURLWUhyWEFoMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYOMwDQYJKoZIhvcNAQELBQADggEBAI6kptZb5Az5dCUEtF/NYgVSUvqm B7vrUJ0V9sQiD4NdmlIc1thmfS2hyWBDuE3CcUMm+/auj3WQJkdhq1F+cgSypgfm w2IQxZkt95KEuA4yqC6587BMIDvS7H3yAZ7epjOO5mHPxrGCAaaLxQttKQjuuN3O +Df2NaP8evAPwhg4/x4SYG1qXnbP5Gnr6j9br4gHGbyhOr9hZph1W/WocAGFtXfr lyvYNzVmVurumf7EWUcX6tsR6j3zWCdGzD441CRp6irj6NtqQkRCpgZaJNiy6Mwy +XIMaKb4kONwN1Vt+n7b3dnjMT3XxO8mu5BTbHdq6guuXVnhHqq2ry1bCLU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org